Chapter 3 PacketiX VPN Server 2.0 Manual

The PacketiX VPN Server is the most important software in the PacketiX VPN system, and as its name implies, acts as a VPN server which supports access from remote VPN Clients, VPN Bridges and so on across a network.

This server must be installed whenever the PacketiX VPN software is used in order to realize a VPN in any format. This is because the PacketiX VPN Server is the only one capable of supporting access from the VPN Client and VPN Bridge.

This chapter describes each of the functions of the PacketiX VPN 2.0 Server as well as how they are used.

The PacketiX VPN is provided as paid software and, upon choosing an edition, a product license and access license must be purchased in order to enable use. For details, please refer to 「1.3 PacketiX VPN 2.0 Product Configuration and License」.

3.1 Operating Environment
　
3.1.1 Support for Windows
　
3.1.2. Support for Linux
　
3.1.3 Support for FreeBSD
　
3.1.4 Support for Solaris
　
3.1.5 Support for Mac OS X
　
3.1.6 Support for Embedded Devices
　
3.1.7 Limitations
3.2 Operating Modes
　
3.2.1 Service Mode
　
3.2.2 User Mode
3.3 VPN Server Administration
　
3.3.1 Administration without the need for System Stop
　
3.3.2 PacketiX VPN Server and Virtual HUBs
　
3.3.3 Administration Tools & Remote Administration
　
3.3.4 Administration Authority
　
3.3.5 SSL Certificates
　
3.3.6 Listener Ports
　
3.3.7 Configuration File
　
3.3.8 Configuration Version Numbers
　
3.3.9 Configuration History
　
3.3.10 Administration of Statistical Information
　
3.3.11 Automatic Adjustment when Disk Space is Insufficient
　
3.3.12 Failure Recovery
　
3.3.13 Keep Alive Internet Connection Function
　
3.3.14 Obtaining Server Information
　
3.3.15 Selecting Encryption Algorithms for use in SSL Transmission
　
3.3.16 Initializing the VPN Server Service Reboot & Configuration Information
　
3.3.17 Syslog Transmission Function
　
3.3.18 Restricting IP Address Remote Administration Connection Sources
3.4 Virtual HUB Functions
　
3.4.1 Creating Virtual HUBs
　
3.4.2 Online & Offline Status
　
3.4.3 Maximum Simultaneous Connections
　
3.4.4 Connection Mode
　
3.4.5 Session Management
　
3.4.6 MAC Address Tables
　
3.4.7 IP Address Table
　
3.4.8 Confirming the Existence of IP Addresses with Poll Packets
　
3.4.9 Communicating in Bridge / Router Mode Session
　
3.4.10 Communicating in Monitoring Mode Session
　
3.4.11 Cascade Connection Functions
　
3.4.12 Server Authentication in Cascade Connections
　
3.4.13 Local Bridge
　
3.4.14 Administrator Connection
　
3.4.15 Obtaining Information on the Virtual HUBs
3.5 Virtual HUB Security
　
3.5.1 Delegating Virtual HUB Administration Authority
　
3.5.2 Virtual HUB Anonymous Enumeration Settings
　
3.5.3 External Authentication Server Settings
　
3.5.4 Users and Groups
　
3.5.5 Trusted Certification Authority Certificates
　
3.5.6 Certificates Revocation List
　
3.5.7 Setting CN & Serial Number on Signed Certificate Authentication
　
3.5.8 Setting an Alias in RADIUS Authentication or NT Domain & Active Directory Authentication
　
3.5.9 Security Policies
　
3.5.10 Packet Filtering with the Access List
　
3.5.11 Limiting Connections with the IP Access Control List
　
3.5.12 Virtual HUB Administration Options
3.6 Local Bridges
　
3.6.1 What is a Local Bridge?
　
3.6.2 Local Bridge Settings & Operation
　
3.6.3 Preparing the Local Bridge network adapter
　
3.6.4 Local Bridge Sessions
　
3.6.5 Supported Network Adapter Types
　
3.6.6 Use of network adapters not supporting Promiscuous Mode
　
3.6.7 Tagged VLAN Frames
　
3.6.8 Outputting all Communication Data in the Virtual HUB to the Network Adapter
　
3.6.9 Using Tap Devices
　
3.6.10 Points to Note when Local Bridging in Windows
　
3.6.11 Points to Note when Local Bridging in Linux
　
3.6.12 Points to Note when Local Bridging in Solaris
3.7 Virtual NAT & Virtual DHCP Servers
　
3.7.1 What is SecureNAT?
　
3.7.2 Setting the Virtual Host Network Interface
　
3.7.3 Virtual NAT
　
3.7.4 Points to Note when using Virtual NAT Function
　
3.7.5 Virtual DHCP Server
　
3.7.6 Points to Note when using the Virtual DHCP Server
　
3.7.7 SecureNAT Sessions
　
3.7.8 Logging SecureNAT Status
3.8 Virtual Layer 3 Switches
　
3.8.1 What is a Virtual Layer 3 Switch?
　
3.8.2 Difference between Bridging & IP Routing
　
3.8.3 Defining Virtual Layer 3 Switches
　
3.8.4 Adding Virtual Interfaces to connect to Virtual HUBs
　
3.8.5 Editing the Routing Table
　
3.8.6 Starting and Stopping Virtual Layer 3 Switches
　
3.8.7 Limitations
3.9 Clustering
　
3.9.1 What is Clustering?
　
3.9.2 Cluster Controllers
　
3.9.3 Cluster Member Servers
　
3.9.4 Load Balancing
　
3.9.5 Load Balancing using Performance Standard Ratio
　
3.9.6 Fault Tolerance
　
3.9.7 Static Virtual HUBs
　
3.9.8 Dynamic Virtual HUBs
　
3.9.9 Connecting to Arbitrary Servers in Static Virtual HUBs
　
3.9.10 Collectively Administering the Entire Cluster
　
3.9.11 Cluster Configuration Licenses
　
3.9.12 Functions not Available Simultaneously with Clustering
3.10 Logging Service
　
3.10.1 Log Save Format & Save Cycle
　
3.10.2 Server Log
　
3.10.3 Virtual HUB Security Log
　
3.10.4 Virtual HUB Packet Log
　
3.10.6 Obtaining Log Files on a Remote Administration Terminal
　
3.10.17 Syslog Transmission function
3.11 Day-to-Day Management
　
3.11.1 Auditing the Server Log
　
3.11.2 Checking Usage Status
　
3.11.3 Backing Up Configuration Information
　
3.11.4 Recovering from Failure
　
3.11.5 Rolling Back the Configuration
　
3.11.6 Confirming Hard Disk Availability
　
3.11.7 Network Administration Support Tools
　
3.11.8 Checking Sufficiency of Required Resources
　
3.11.9 Measuring Effective Throughput

< 2.6 VPN Command Line Management Utility (vpncmd)

3.1 Operating Environment>